add password-reset flow: request endpoint + reset page + login link (shared OneTimeToken)

app/public/admin/login.php

@@ -21,6 +21,10 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
     $error = 'Mot de passe incorrect.';
 }
 
+// Ensure a CSRF token exists for the reset-password form on this page.
+require_once APP_ROOT . '/src/App.php';
+App::boot();
+
 $pageTitle = 'Connexion';
 $isAdmin = true; $isLogin = true; $bodyClass = 'admin-body';
 require_once APP_ROOT . '/templates/head.php';